Nothing new here, just three forums used to scam stupid people like carders.
It's always the same method: advertising via spam and to view the content you must pay a fee.
Our first forum is a phpbb with fake statistic.
• dns: 1 ›› ip: 126.96.36.199 - adresse: FORUMSCC.COM
Forum look's huge:
Users are charged a $0.5 LR fee to view forums:
Fake online users:
Second example, fake carding shop:
• dns: 1 ›› ip: 188.8.131.52 - adresse: MARALIMACLASSIC.COM.BR
The captcha is iframed:
When you complete the name field and click login you are redirected always to register.html
The site index is defaced by a random lammer:
When you click to register you are redirected on a fake Liberty Reserve page:
• dns: 1 ›› ip: 184.108.40.206 - adresse: SCI.LIBIRTYRESERVES.COM
Another fake site, probably do by the same guys:
The mail lead here:
• dns: 1 ›› ip: 220.127.116.11 - adresse: ZCB.CO.IN
• dns: 1 ›› ip: 18.104.22.168 - adresse: SCII.LIBERTYERESERVE.COM
PHP stuff can be found here: http://www.kernelmode.info/forum/viewtopic.php?f=16&t=2410&p=19111#p19111
EXP/Linux.Small.AU here: http://www.kernelmode.info/forum/viewtopic.php?f=16&t=2697#p19112